FileFix in the wild! New FileFix campaign goes beyond POC and leverages steganography

**Executive summary:** Acronis TRU discovered a sophisticated FileFix phishing campaign (an evolution of ClickFix) using heavily obfuscated multilingual phishing pages and steganography to hide a second-stage PowerShell script and encrypted executables inside JPG images; the multistage chain culminates in a Go-based loader that deploys the StealC infostealer to harvest browsers, wallets, messaging apps and cloud credentials, with active indicators and global targeting observed.